Topics

Hi everyone,

we are using an DEC3840 and are experiencing issues with updates.
I already read other posts in this forum, but they all don't really match our problem.

First of all, we already trief a bunch of different DNS servers, local ones, cloudflare, pihole, etc.

Pinging pkg.opnsense.org is no problem, domain gets resolved instantly:

Code Select Expand

PING pkg.opnsense.org (89.149.211.205): 56 data bytes
64 bytes from 89.149.211.205: icmp_seq=0 ttl=53 time=11.470 ms
64 bytes from 89.149.211.205: icmp_seq=1 ttl=53 time=11.247 ms
64 bytes from 89.149.211.205: icmp_seq=2 ttl=53 time=23.779 ms
64 bytes from 89.149.211.205: icmp_seq=3 ttl=53 time=25.262 ms
64 bytes from 89.149.211.205: icmp_seq=4 ttl=53 time=18.210 ms
64 bytes from 89.149.211.205: icmp_seq=5 ttl=53 time=11.422 ms
64 bytes from 89.149.211.205: icmp_seq=6 ttl=53 time=11.382 ms
64 bytes from 89.149.211.205: icmp_seq=7 ttl=53 time=12.614 ms
64 bytes from 89.149.211.205: icmp_seq=8 ttl=53 time=17.008 ms
64 bytes from 89.149.211.205: icmp_seq=9 ttl=53 time=11.487 ms
64 bytes from 89.149.211.205: icmp_seq=10 ttl=53 time=11.575 ms
64 bytes from 89.149.211.205: icmp_seq=11 ttl=53 time=11.422 ms
64 bytes from 89.149.211.205: icmp_seq=12 ttl=53 time=11.285 ms
64 bytes from 89.149.211.205: icmp_seq=13 ttl=53 time=11.504 ms
64 bytes from 89.149.211.205: icmp_seq=14 ttl=53 time=11.364 ms
64 bytes from 89.149.211.205: icmp_seq=15 ttl=53 time=11.486 ms
64 bytes from 89.149.211.205: icmp_seq=16 ttl=53 time=11.620 ms
64 bytes from 89.149.211.205: icmp_seq=17 ttl=53 time=13.507 ms
64 bytes from 89.149.211.205: icmp_seq=18 ttl=53 time=36.484 ms
64 bytes from 89.149.211.205: icmp_seq=19 ttl=53 time=46.795 ms
64 bytes from 89.149.211.205: icmp_seq=20 ttl=53 time=11.375 ms
64 bytes from 89.149.211.205: icmp_seq=21 ttl=53 time=11.948 ms
64 bytes from 89.149.211.205: icmp_seq=22 ttl=53 time=11.457 ms
64 bytes from 89.149.211.205: icmp_seq=23 ttl=53 time=11.438 ms
64 bytes from 89.149.211.205: icmp_seq=24 ttl=53 time=11.190 ms
64 bytes from 89.149.211.205: icmp_seq=25 ttl=53 time=11.264 ms
^C
--- pkg.opnsense.org ping statistics ---
26 packets transmitted, 26 packets received, 0.0% packet loss
round-trip min/avg/max/stddev = 11.190/15.369/46.795/8.553 ms

When i try

Code Select Expand

pkg -d update -f, the meta.conf sometimes gets fetched after a few minutes, but the update gets stuck afterwards.
In the meantime, fetch does not complete due to a timeout.

In the livelog, the requests gets through the firewall with the "let out anything from firewall itself" rule.
I can also see the ip getting resolved in our dns servers log.
Traceroute to pkg.opnsense.org also working.

I already tried different mirrors and already cloned the mirror to a local server in our network, causing the exact same issue.

I also attachen one screenshot from a partially fetching

Code Select Expand

pkg -d update -f.

Usually,

Code Select Expand

pkg -d update -f returns this:

Code Select Expand

root@turing:~ # pkg -d update -f
DBG(1)[98888]> pkg initialized
Updating OPNsense repository catalogue...
DBG(1)[98888]> PkgRepo: verifying update for OPNsense
DBG(1)[98888]> PkgRepo: need forced update of OPNsense
DBG(1)[98888]> Pkgrepo, begin update of '/var/db/pkg/repo-OPNsense.sqlite'
DBG(1)[98888]> Request to fetch pkg+https://pkg.opnsense.org/FreeBSD:12:amd64/21.7/latest/meta.conf
DBG(1)[98888]> opening libfetch fetcher
DBG(1)[98888]> Fetch > libfetch: connecting
DBG(1)[98888]> Fetch: fetching from: https://pkg.opnsense.org/FreeBSD:12:amd64/21.7/latest/meta.conf with opts "i"
DBG(1)[98888]> Fetch: fetching from: https://pkg.opnsense.org/FreeBSD:12:amd64/21.7/latest/meta.conf with opts "i"
DBG(1)[98888]> Fetch: fetching from: https://pkg.opnsense.org/FreeBSD:12:amd64/21.7/latest/meta.conf with opts "i"
DBG(1)[98888]> Request to fetch pkg+https://pkg.opnsense.org/FreeBSD:12:amd64/21.7/latest/meta.txz
DBG(1)[98888]> opening libfetch fetcher
DBG(1)[98888]> Fetch > libfetch: connecting
DBG(1)[98888]> Fetch: fetching from: https://pkg.opnsense.org/FreeBSD:12:amd64/21.7/latest/meta.txz with opts "i"
DBG(1)[98888]> Fetch: fetching from: https://pkg.opnsense.org/FreeBSD:12:amd64/21.7/latest/meta.txz with opts "i"
DBG(1)[98888]> Fetch: fetching from: https://pkg.opnsense.org/FreeBSD:12:amd64/21.7/latest/meta.txz with opts "i"
pkg: https://pkg.opnsense.org/FreeBSD:12:amd64/21.7/latest/meta.txz: No route to host
repository OPNsense has no meta file, using default settings
DBG(1)[98888]> Request to fetch pkg+https://pkg.opnsense.org/FreeBSD:12:amd64/21.7/latest/packagesite.txz
DBG(1)[98888]> opening libfetch fetcher
DBG(1)[98888]> Fetch > libfetch: connecting
DBG(1)[98888]> Fetch: fetching from: https://pkg.opnsense.org/FreeBSD:12:amd64/21.7/latest/packagesite.txz with opts "i"

DBG(1)[98888]> Fetch: fetching from: https://pkg.opnsense.org/FreeBSD:12:amd64/21.7/latest/packagesite.txz with opts "i"
DBG(1)[98888]> Fetch: fetching from: https://pkg.opnsense.org/FreeBSD:12:amd64/21.7/latest/packagesite.txz with opts "i"
pkg: https://pkg.opnsense.org/FreeBSD:12:amd64/21.7/latest/packagesite.txz: No route to host
Unable to update repository OPNsense
Error updating repositories!

GUI update log:

Code Select Expand

***GOT REQUEST TO CHECK FOR UPDATES***
Currently running OPNsense 21.7.6 (amd64/OpenSSL) at Tue Jan 25 13:55:31 CET 2022
Fetching changelog information, please wait... fetch: transfer timed out
Updating OPNsense repository catalogue...
pkg: https://pkg.opnsense.org/FreeBSD:12:amd64/21.7/latest/meta.txz: No route to host
repository OPNsense has no meta file, using default settings
pkg: https://pkg.opnsense.org/FreeBSD:12:amd64/21.7/latest/packagesite.txz: No route to host
Unable to update repository OPNsense
Error updating repositories!
pkg: Repository OPNsense cannot be opened. 'pkg update' required
Checking integrity... done (0 conflicting)
Your packages are up to date.

Unbound is currently disabled.
Currently no plugin conflicts.


Thanks for your help!